{ pkgs, ... }:
{
  config = {
    services = {
      clamav = {
        daemon.enable = true;
        updater.enable = true;
        fangfrisch = {
          enable = true;
          settings."sanesecurity"."enabled" = "no";
        };
        scanner = {
          enable = true;
        };
      };
      flatpak.enable = true;
      openssh.enable = true;
      tzupdate.enable = true;
    };
    virtualisation = {
      libvirtd = {
        enable = true;
        qemu = {
          ovmf.packages = [ pkgs.OVMFFull.fd ];
          swtpm.enable = true;
          vhostUserPackages = with pkgs; [ virtiofsd ];
        };
      };
      podman = {
        enable = true;
        defaultNetwork.settings.dns_enabled = true;
      };
    };
    systemd.services.clamdscan.unitConfig.ConditionACPower = true;
  };
}
